Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- SMB network file system;
- Network namespace;
- Networking core;
(CVE-2024-26928, CVE-2024-56658, CVE-2024-35864, CVE-2024-57798)
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | linux-aws-5.15 | 5.15.0-1081.88~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-lowlatency-hwe-5.15 | 5.15.0-136.147~20.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-oracle-5.15 | 5.15.0-1078.84~20.04.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux | 5.15.0-136.147 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-aws | 5.15.0-1081.88 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gcp | 5.15.0-1080.89 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gke | 5.15.0-1078.84 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-gkeop | 5.15.0-1063.71 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-ibm | 5.15.0-1073.76 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-intel-iotg | 5.15.0-1076.82 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-kvm | 5.15.0-1077.82 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-lowlatency | 5.15.0-136.147 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-nvidia-tegra | 5.15.0-1034.34 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-oracle | 5.15.0-1078.84 |
| Ubuntu · 22.04 LTS 22.04:LTS | linux-raspi | 5.15.0-1075.78 |
Vulnerabilities 4
-
Critical 9.8
smb: client: fix potential UAF in smb2_is_valid_lease_break()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_lease_break() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.
-
High 7.8
net: defer final 'struct net' free in netns dismantle
In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dismantle Ilya reported a slab-use-after-free in dst_destroy [1] Issue is in xfrm6_net_init() and xfrm4_net_init() : They copy xfrm[46]_dst_ops_tem…
-
High 7.8
drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() While receiving an MST up request message from one thread in drm_dp_mst_handle_up_req(), the MST topology could b…
-
Unscored —
smb: client: fix potential UAF in cifs_debug_files_proc_show()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in cifs_debug_files_proc_show() Skip sessions that are being teared down (status == SES_EXITING) to avoid UAF.